CVE-2018-0185

CVE-2018-0185 describes multiple command injection vulnerabilities in the CLI parser of Cisco IOS XE Software. An authenticated, local attacker can exploit these flaws by submitting malicious CLI commands that are not properly sanitized, allowing them to break out of the CLI. This provides access to the underlying Linux shell with root privileges on the affected device. The vulnerability has a CVSS v3 score of 7.8 (High), indicating a significant risk. Exploitation requires local access and authentication, but once achieved, it grants full control (Confidentiality, Integrity, and Availability impacts are High) with low attack complexity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered widespread attention.